Post by head_dunce » Fri May 10, 2019 4:39 am

I see my server running something called 3.02_conf by apache for hours now. What is that? I killed it. CentOS

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by head_dunce » Fri May 10, 2019 8:43 pm

Ok, I see a large binary file in /var/www/html/admin called 3.02_conf -- what does that do?

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by head_dunce » Fri May 10, 2019 9:19 pm

Re-booted the server and BOOM this file starts up again jumping all over bandwidth and CPU.

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by xPLd » Fri May 10, 2019 9:22 pm

I found this file too. It's a part of botnet, that uses your server. You definetly used nulled themes or modules. Bad news - only one way to stop this - opencart reinstall with normal mods and themes. Or you can find code by yourself, but you need to look at your files manually, that's hard and takes a long time.

Newbie

Posts

Joined
Fri May 10, 2019 9:19 pm

Post by head_dunce » Fri May 10, 2019 9:41 pm

Just checked backups, that file did not exist on the last backup from 10 days ago. So where did it come from?

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by head_dunce » Fri May 10, 2019 9:44 pm

And now I see in the crontab

Code: Select all

* * * * * /var/www/html/admin/3.02_conf  > /dev/null 2>&1

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by head_dunce » Fri May 10, 2019 9:51 pm

A search for "3.02_conf" shows someone else's web site with OpenCart also with this file

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by head_dunce » Fri May 10, 2019 10:29 pm

xPLd wrote:
Fri May 10, 2019 9:22 pm
I found this file too. It's a part of botnet, that uses your server. You definetly used nulled themes or modules. Bad news - only one way to stop this - opencart reinstall with normal mods and themes. Or you can find code by yourself, but you need to look at your files manually, that's hard and takes a long time.
What do you mean by nulled themes or modules?

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by head_dunce » Fri May 10, 2019 11:44 pm

I'm trying to remember what I've installed, it hasn't been much -

Export/Import Tool -
https://www.opencart.com/index.php?rout ... _license=0

Twig debug (support dump) -
https://www.opencart.com/index.php?rout ... n_id=33928
This didn't work, so I uninstalled it right after installing it. Doesn't look like it does much, can't see how this caused any trouble.

And I think that's it. I've been editing the default theme, never uploaded one. Is there somewhere that logs what has been installed? Here's my system log -

Code: Select all

2019-04-04 19:50:36 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
2019-04-04 19:51:14 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
2019-04-05 13:39:03 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
2019-04-10 15:39:54 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
MOD: OCstore

FILE: catalog/controller/common/footer.php
CODE: $data['text_newsletter'] = $this->language->get('text_newsletter');
NOT FOUND - OPERATION SKIPPED!
CODE: $data['newsletter'] = $this->url->link('account/newsletter', '', true);
LINE: 38
----------------------------------------------------------------
2019-04-10 15:40:15 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
2019-04-10 15:43:13 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
MOD: OCstore

FILE: catalog/controller/common/footer.php
CODE: $data['text_newsletter'] = $this->language->get('text_newsletter');
NOT FOUND - OPERATION SKIPPED!
CODE: $data['newsletter'] = $this->url->link('account/newsletter', '', true);
LINE: 38
----------------------------------------------------------------
2019-04-10 15:43:35 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
2019-04-23 20:36:33 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
2019-05-08 1:42:36 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: <font color="#263238"><b>Twig Debug</b></font>
CODE: $config = array('autoescape' => false);
LINE: 31
CODE: $this->twig = new \Twig_Environment($loader, $config);
LINE: 43
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
2019-05-08 1:42:39 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: <font color="#263238"><b>Twig Debug</b></font>
CODE: $config = array('autoescape' => false);
LINE: 31
CODE: $this->twig = new \Twig_Environment($loader, $config);
LINE: 43
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
2019-05-08 1:43:30 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: <font color="#263238"><b>Twig Debug</b></font>
CODE: $config = array('autoescape' => false);
LINE: 31
CODE: $this->twig = new \Twig_Environment($loader, $config);
LINE: 43
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
2019-05-08 1:54:47 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
2019-05-08 15:41:40 - MOD: Modification Default

FILE: system/engine/action.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 69

FILE: system/engine/loader.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 77
LINE: 151
LINE: 168

FILE: system/library/config.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 59

FILE: system/library/language.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 67
LINE: 73

FILE: system/library/template/template.php
REGEX: ~(require|include)(_once)?\(([^)]+)~
LINE: 18

FILE: system/library/template/twig.php
CODE: $loader = new \Twig_Loader_Filesystem(DIR_TEMPLATE);
LINE: 19
----------------------------------------------------------------
MOD: Export/Import Tool (V3.20) for OpenCart 3.x

FILE: admin/controller/common/column_left.php
CODE: if ($this->user->hasPermission('access', 'tool/upload')) {
LINE: 601

FILE: admin/language/en-gb/common/column_left.php
CODE: $_['text_backup']
LINE: 8
----------------------------------------------------------------
There is no sensitive data on this server since all I've been trying to do is get things moved over from my Yahoo store.
I now also see another version of this file at this location
/var/www/html/catalog/view/3.02_conf

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by head_dunce » Sat May 11, 2019 8:49 am

Is there nothing that logs what extensions were installed / uninstalled?

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by IP_CAM » Sat May 11, 2019 10:08 am

Well, you should know best, from where you got what onto your Server ... ::)
Could be anything, possibly a Crypto Currency Miner, using your Server, due
to it's relatively large data size.
Darknet Code today likely contains such stuff, to at least generate some
income out of their otherwise freely available (paid) Extensions. :laugh:
Ernie
---
https://www.google.com/search?newwindow ... =3.02_conf
---
Image

My Github OC Site: https://github.com/IP-CAM
5'200 + FREE OC Extensions, on the World's largest private Github OC Repository Archive Site.


User avatar
Legendary Member

Posts

Joined
Tue Mar 04, 2014 1:37 am
Location - Switzerland

Post by head_dunce » Sat May 11, 2019 10:48 am

Had it installed on a small server, no real horsepower to use. It was just me in there testing things. And no worries from my end, there was nothing there to steal aside from changes to code that I already shared on this forum anyway. I'm just very curious how this happened.

My question though is if there is a log of what has been installed for extensions? I've been toying with this application now for over a month, and I've learned a lot about it. I only recall installing the 2 extensions I listed above, but I may have tried some other things in the first few days of experimenting that I'm forgetting. It seems strange that there's not a log of this? It seems I'm not the only one who bumped into this problem, it'd be nice to see if everyone with the problem had an extension in common (knowing that yes, the code might delete the log anyway, since it seems to write it's own root contab.)

And this brings up another question, does anyone review the code that is posted to the opencart.com extensions area? It seems like such a mess in there, I question if anyone can really just post anything?

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by IP_CAM » Sat May 11, 2019 11:54 am

.. does anyone review the code that is posted to the
extensions area? It seems like such a mess in there, I question
if anyone can really just post anything?
Well, OC removes some Extensions, on Request, if one finds some 'screwy' Mod in the
Extension Section. But it would be more than a fulltime Job, to check everything. :choke:

But everybody is free, to create an Extension, as you wish, to know, what's installed
on Mods. Nobody yet seemed to be looking for such, otherwise, one would possibly
have created one, containing all Infos on Modules and Vq-/Oc-Mods on a single Page.

Ernie

My Github OC Site: https://github.com/IP-CAM
5'200 + FREE OC Extensions, on the World's largest private Github OC Repository Archive Site.


User avatar
Legendary Member

Posts

Joined
Tue Mar 04, 2014 1:37 am
Location - Switzerland

Post by letxobnav » Sat May 11, 2019 12:51 pm

As I mentioned before, never blindly install any extension, if the functionality seems worth your while, take it apart and put it back together again and install it manually.
If that is not worth your while then the functionality is not worth it or you just like to live dangerously.

Crystal Light Centrum Taiwan
Extensions: MailQueue | SUKHR | VBoces

“Data security is paramount at [...], and we are committed to protecting the privacy of anyone who is associated with our [...]. We’ve made a lot of improvements and will continue to make them.”
When you know your life savings are gone.


User avatar
Expert Member

Posts

Joined
Fri Aug 18, 2017 4:35 pm
Location - Taiwan

Post by OSWorX » Sat May 11, 2019 5:16 pm

head_dunce wrote:
Sat May 11, 2019 10:48 am
And this brings up another question, does anyone review the code that is posted to the opencart.com extensions area? It seems like such a mess in there, I question if anyone can really just post anything?
Every extension published on the marketplace is reviewed.
But - as always, it can happen because of the updates a dev may make, that a "not so clean" extension may be published.

Whenever a customer thinks that aN extension from the Marketplace may be unsafe, simply contact the support:
https://www.opencart.com/index.php?rout ... rt/support

Also contact the support, if the extension in encrypted, doing homecalls without users interaction, sending emails to gmail accounts .. and so on (everything seen such by myself on several customer webs).

One of the most made mistake of many people is, to get extensions, modules and templates NOT from the official sources (OC Marketplace, developers own Shop).
Just to 'save money'.
Instead installing extensions from unsafe sources, will open any door you may have.
Which may lead to situations described here.

And - not to forget! - never use a free hoster/provider for your webshop.
Why?
Do you know why it is free?
Do you know what these people may do?
Do you know how save is the server?

No.

And at least: never give access to someone you do not know.
Like so called devs, reachable only over a free gmail address, having no real address, no phone number.

Full Stack Web Developer :: Dedicated OpenCart Development & Support DACH Region
Contact for Custom Work / Fast Support.


User avatar
Guru Member

Posts

Joined
Mon Jan 11, 2010 10:52 pm
Location - Austria

Post by head_dunce » Sat May 11, 2019 6:22 pm

OSWorX wrote:
Sat May 11, 2019 5:16 pm
Every extension published on the marketplace is reviewed.
But - as always, it can happen because of the updates a dev may make, that a "not so clean" extension may be published.
So are you saying an extension is only reviewed once and updates to that extension are not?

OSWorX wrote:
Sat May 11, 2019 5:16 pm
Also contact the support, if the extension in encrypted, doing homecalls without users interaction, sending emails to gmail accounts .. and so on (everything seen such by myself on several customer webs).
Yikes!!!

OSWorX wrote:
Sat May 11, 2019 5:16 pm
And - not to forget! - never use a free hoster/provider for your webshop.
I'm a big fan of https://www.digitalocean.com

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by head_dunce » Sat May 11, 2019 6:56 pm

Ok, new fresh install of OC now on another server.
Should I trust this extension?
https://www.opencart.com/index.php?rout ... sion_id=17
I wrote some Perl scripts on another server to export products in the format that extension wants, although really I need an API that lets me update products so maybe I need to write one.

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by letxobnav » Sat May 11, 2019 7:18 pm

Code: Select all

I'm a big fan of https://www.digitalocean.com
yep, digitalocean is the "to go to" ISP for spammers, scrapers, wannabe hackers, etc.
Have countless of their ip's in my blacklist.

Crystal Light Centrum Taiwan
Extensions: MailQueue | SUKHR | VBoces

“Data security is paramount at [...], and we are committed to protecting the privacy of anyone who is associated with our [...]. We’ve made a lot of improvements and will continue to make them.”
When you know your life savings are gone.


User avatar
Expert Member

Posts

Joined
Fri Aug 18, 2017 4:35 pm
Location - Taiwan

Post by head_dunce » Sat May 11, 2019 7:43 pm

letxobnav wrote:
Sat May 11, 2019 7:18 pm

Code: Select all

I'm a big fan of https://www.digitalocean.com
yep, digitalocean is the "to go to" ISP for spammers, scrapers, wannabe hackers, etc.
Have countless of their ip's in my blacklist.
Ha, they have a lot of clients and obviously all don't have good intent. I went from a stack of HP DL580's in my office to them about 3 years ago, still happy with their service.

Jim
https://www.carguygarage.com
Yahoo Store since 2006 moved to OpenCart on January 24, 2020


Active Member

Posts

Joined
Thu Apr 04, 2019 11:50 pm

Post by letxobnav » Sat May 11, 2019 7:56 pm

of course you are happy with their service, no problems whatsoever.

Crystal Light Centrum Taiwan
Extensions: MailQueue | SUKHR | VBoces

“Data security is paramount at [...], and we are committed to protecting the privacy of anyone who is associated with our [...]. We’ve made a lot of improvements and will continue to make them.”
When you know your life savings are gone.


User avatar
Expert Member

Posts

Joined
Fri Aug 18, 2017 4:35 pm
Location - Taiwan
Who is online

Users browsing this forum: No registered users and 58 guests